VYPR
← All advisories
High severity7.8NVD Advisory· Published Oct 14, 2022· Updated Jun 17, 2026

CVE-2022-41307

CVE-2022-41307

Description

A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Affected products

6
  • Autodesk/Subassembly Composer4 versions
    cpe:2.3:a:autodesk:subassembly_composer:2020:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:autodesk:subassembly_composer:2020:*:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:subassembly_composer:2021:*:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:subassembly_composer:2022:*:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:subassembly_composer:2023:*:*:*:*:*:*:*
  • SubassemblyComposer/SubassemblyComposerdescription
  • Autodesk/SubassemblyComposerllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.